This listing of claims will replace all prior versions, and listings, of claims in the application. 



LISTING OF CLAIMS: 
IN THE CLAIMS: 

1 . (Currently Amended) A verification method comprising verifying ownership of an 
electronic receipt in a communication system providing a public key encryption 
infrastructure, including the steps of; 

using ' a first privat e public signatur e k e y pair to issu e- a pseudonym to a - u se r f 

said user uoing said ps e udonym and th e first privat e signature - k e y to obtain a 
r e c e ipt from an issuer, whoroin - said r e c e ipt is electronically sign e d by the issu e r using 
the first public - signature k e y, and includ es d e tails for what said - r e c e ipt has b e en given 
and a r e f e r e nce to a designated own e r of said receipt ? 

receiving a message from a sender, said message being electronically signed 
by said sender using a first s e cond private signature key of a first private-public key 
pair different than th e first privat e signature key and owned by said sender, wherein 
said message includes the electronic saM receipt as electronically signed by an issuer 
using a private signature key of a second private-public key pair that is assigned to the 
issuer, and wherein the receipt includes details for what said receipt has been given 
and a reference to a designated owner of the receipt; 

obtaining a public signature verification key on the basis of said reference to 
said owner of the electronic said receipt; and 

examining whether or not said second private signature key used for 
electronically signing said message is associated to said public signature verification 
key obtained on the basis of said reference to said owner of said receipt thereby to 
verify ownership of the receipt by said owner while maint ainin g said owner 
anonymous or pseudonymous. 

2 . (Original) The method according to claim 1 , wherein said reference to said owner of 
said receipt is a public signature verification key associated to a private signature key 
held by said owner of said receipt. 
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3 . (Original) The method according to claim 1 , wherein said reference to said owner of 
said receipt is a pseudonym used by said owner of the receipt. 

4. (Original) The method according to claim 3, wherein obtaining said public signature 
verification key on the basis of said pseudonym used by said owner of said receipt 
includes getting a certificate securely linking said pseudonym to said public signature 
verification key. 

5. (Original) The method according to claim 1 , further comprising the step of 
authenticating said receipt using a public signature verification key assigned to said 
issuer of said receipt. 

6. (Currently Amended) A receipt generation method, comprising generating an 
electronic receipt in a communication system providing a public key encryption 
system, including the steps of: 

receiving a message from a sender using a pseudonym, wherein said 
pseudonym is issued using a first private-public signature key pair, and said message 
is electronically signed by said sender using the first private signature key owned by 
said sender, whereby said message includes a transaction request and a reference to a 
designated owner of a receipt to be generated; 

authenticating said message using a public signature verification key 
associated to said first private signature key held by said sender of said message; 

issuing a receipt including said reference to said designated owner of said 
receipt and details for what said receipt has been given to provide said designated 
owner with said receipt and thereby to enable said owner to verify ownership of the 
receipt by using a second private-public signature key pair different than the first 
private-public signature key pair, while maintaining said owner anonymous or 
pseudonymous; and 
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electronically signing and issuing said receipt using the second private-public 
signature key pair with the first - Bublic signato e-key assigned to an issuer issuing said 
receipt. 

7. (Original) The method according to claim 6, further including the steps of performing 
said requested transaction, and remming said receipt to said sender. 

8. (Original) The method according to claim 6, wherein said sender uses an anonymous 
communication connection. 

9. (Original) The method according to claim 6, wherein said sender uses a pseudonym 
for communicating. 

10. (Original) The method according to claim 6, wherein said reference to a designated 
owner is a pseudonym used by said designated owner. 

1 1 . (Original) The method according to claim 6, wherein said designated owner of the 
receipt is the sender. 

12. (Original) The method according to claim 6, wherein said reference to a designated 
owner is a public signature key associated to a private signature verification key held 
by said designated owner of said receipt. 

1 3 . (Currently Amended) A method for proving ownership of a receipt, the method 
comprising proving ownership of said receipt in a communication system providing a 
public key encryption infrastructure, including the steps of: 

a user using a pseudonym to create a first message including a transaction 
request and a reference to a designated owner of a receipt to be generated in response 
to receiving said message, wherein said pseudonym is issued to the user using a first 
private-public signature key pair; 
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the user electronically signing said message using the first private signature 

key; 

sending said first message to a first addressee; and 
receiving said receipt from said first addressee, said receipt heing 
electronically signed by said first addressee having given said r e ceipt using a second 
the first private signature key of a second private-public key pair assigned to said first 
addressee, wherein said receipt includes information as for what said receipt has been 
issued and said reference to said designated owner of said receipt and thereby to 
enable said owner to verify ownership of the receipt by using the [[a]] second private- 
public signature key pair different that the first private-public signature key pair, while 
maintaining said owner anonymous or pseudonymous. 

14. (Original) The method according to claim 13, further comprising: 

creating a second message including said receipt; 

electronically signing said second message using a second private signature 
key; and 

sending said second message to a second addressee; 

15. (Previously Presented) The method according to claim 14, wherein the first addressee 
is identical to the second addressee. 

16. (Previously Presented) The method according to claim 14, wherein the first private 
signature key is identical to the second private signature key. 

1 7. (Original) The method according to claim 13, wherein said reference to said 
designated owner of said receipt is a pseudonym used by said owner of the receipt. 

1 8. (Original) The method according to claim 13, wherein said reference to said 
designated owner of said receipt is a public signature verification key associated to a 
private signature key held by said owner of said receipt. 
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19. 



(Original) The method according to claims 13, wherein said designated owner of said 
receipt is identical to a sender sending said first message to the first addressee. 



20. (Original) The method according to claim 13, further comprising: 

creating a second message including said receipt; electronically signing said 
second message using a second private signature key; and 

sending said second message to said designated owner of said receipt. 

2 1 . (Previously Presented) The method according to claim 20, wherein said steps of 
sending and receiving of the first message and second message is performed over an 
anonymous communication connection. 



22. (Previously Presented) The method according to claim 20, wherein said sending and 
receiving of the first message and second message is performed by using a 
pseudonym. 



23 . (Original) A computer program product stored on a computer usable medium, 

comprising computer readable program means for causing a computer to perform a 
method according to claim 1 . 



(Currently Amended) A verification device comprising: 

means for using a first private-public signature key pair to issue a pseudonym 
to a user; 

means for said user, using said pseudonym, to obtain a receipt that is 
electronically signed by -fr-em an issue r, wh e rein said r e c e ipt is electronically aign o d by 
th e is s u e r using a second the first private signature key of a second private-public 
signature key pair, and includes details for what said receipt has been given and a 
reference to a designated owner of said receipt; 

means for receiving a message from a sender tha t, said m e ssag e is 
electronically signed by said sender using the [[a]] second private signature key that is 



6 



G:\IBM\105\18907\Amend\189D7,am5.doc 



different than the first private signature key and owned by said sender, said message 
includes said receipt; 

means for obtaining a public signature verification key of said second private- 
public signature key pair on the basis of said reference to said owner of said receipt; 
and 

means for examining whether or not said second private signature key used for 
electronically signing said message is associated to said public signature verification 
key obtained on the basis of said reference to said owner of said receipt thereby to 
verify ownership of the receipt by said owner while mamtaining said owner 
anonymous or pseudonymous, said device being for verifying ownership of said 
receipt in a communication system providing a public key encryption infrastructure. 

(Currently Amended) A receipt generating device comprising: 

means for receiving a message from a sender using a pseudonym, wherein said 
pseudonym is issued using a first private-public signature key pair, and said message 
is electronically signed by said sender using a second private signature key of a second 
private-public signature key pair owned by said sender, and wherein whereby said 
message includes a transaction request and a reference to a designated owner of a 
receipt to be generated; 

means for authenticating said message using a first public signature 
verification key associated to said first private signature key held by said sender of 
said message; 

means for issuing a receipt including said reference to said designated owner 
of said receipt and details for what said receipt has been given to provide said 
designated owner with said receipt and thereby to enable said owner to verify 
ownership of the receipt by using the [[a]] second private-public signature key pair 
di - ff e r e nt than th e first privat e public signatur e key pair, while mamtaining said owner 
anonymous or pseudonymous; and 

means for electronically signing said receipt with the second private &st 
public signature key of the second private-public key pair assigned to an issuer issuing 
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said receipt, said device being for generating said receipt in a communication system 
providing a public key encryption system. 

26. (Currently Amended) A device for proving ownership of a receipt, said device 
comprising: 

means for a user, using a pseudonym, for creating a first message including a 
transaction request and a reference to a designated owner of the receipt to be generated 
in response of receiving said message, wherein said pseudonym is issued using a first 
private-public signature key pair; 

means for electronically signing said message by the user using the first private 
signature key; 

means for sending said first message to a first addressee; 

means for receiving a receipt from said first addressee, which is electronically 
signed by said first addressee having given said receipt using a second the first private 
signature key of a second private-public signature key pair assigned to said first 
addressee, wherein said receipt includes information related to a purpose for which 
said receipt has been given, and related to said reference to said designated owner of 
said receipt thereby to enable said owner to verify ownership of the receipt by said 
owner by using die [[a]] second private-public signature key pair diff e r e nt than the 
first privat e public signature key pair, - while maintaining said owner anonymous or 
pseudonymous, 

said device being for proving ownership of the receipt in a communication 
system providing a public key encryption infrastructure. 

27. (Original) A computer program product stored on a computer usable medium, 
comprising computer readable program means for causing a computer to perform a 
method according to claim 6. 

28. (Original) A computer program product stored on a computer usable medium, 
comprising computer readable program means for causing a computer to perform a 
method according to claim 13. 
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29. 



(Cancelled) 



30. (Original) A program storage device readable by machine, tangibly embodying a 
program of instructions executable by the machine to perform method steps for 
verification, said method steps comprising the steps of claim 1. 

3 1 . (Original) A program storage device readable by machine, tangibly embodying a 
program of instructions executable by the machine to perform method steps for receipt 
generation, said method steps comprising the steps of claim 6, 

32. (Original) A program storage device readable by machine, tangibly embodying a 
program of instructions executable by the machine to perform method steps for 
proving ownership of a receipt, said method steps comprising the steps of claim 1 3 . 

33. (Original) A computer program product comprising a computer usable medium having 
computer readable program code means embodied therein for causing receipt 
verification, the computer readable program code means in said computer program 
product comprising computer readable program code means for causing a computer to 
effect the functions of the device in claim 24. 

34. (Original) A computer program product comprising a computer usable medium having 
computer readable program code means embodied therein for causing receipt 
generation, the computer readable program code means in said computer program 
product comprising computer readable program code means for causing a computer to 
effect the functions of the device in claim 25. 

35. (Original) A computer program product comprising a computer usable medium having 
computer readable program code means embodied therein for causing proof of receipt 
ownership, the computer readable program code means in said computer program 
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product comprising computer readable program code means for causing a computer to 
effect the functions of the device in claim 26. 
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